Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS60379.roa
File: AS60379.roa (raw, json)
Hash identifier: 0XJ9NKz7amoJrqUwYYPy4na6RIC0RTTUETQMKHQGhs4=
Subject key identifier: D7:4C:52:CF:AF:B0:F7:D5:5E:9D:3F:42:2F:3A:4C:0B:AA:C2:A2:58
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7D132C73CB646F0DA15B4DB00CE8EB6A373EE61F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS60379.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 60379
IP address blocks: 2a06:a005:127b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:13:2c:73:cb:64:6f:0d:a1:5b:4d:b0:0c:e8:eb:6a:37:3e:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=D74C52CFAFB0F7D55E9D3F422F3A4C0BAAC2A258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:d2:6c:d4:97:98:b2:d5:cf:19:0a:50:c1:
53:f9:7e:59:a1:67:74:eb:d9:99:6b:2f:ca:90:04:
ff:67:d2:c3:23:df:79:16:78:5a:96:1a:9a:db:ef:
68:25:11:89:ca:16:34:ad:f3:b0:5d:bd:34:dc:39:
00:ab:9b:58:ca:e7:58:fb:24:82:60:dd:45:35:d3:
90:1f:31:7f:f7:e0:1e:4a:c5:84:ca:11:18:ef:96:
51:8e:e5:17:f8:eb:ae:b9:f0:60:5f:be:de:2d:b9:
63:0d:34:4c:c7:7c:c6:4f:9c:dc:e6:78:03:5f:77:
51:1c:9d:9f:3e:dc:36:4b:e1:ee:2d:e6:ca:59:3e:
d2:7e:6c:bf:fa:2c:bd:67:a0:6f:2c:ac:32:c9:b9:
67:f3:cb:09:c3:f0:f7:d8:9c:2b:cf:c1:cd:71:5f:
eb:ed:c4:f1:98:3d:08:87:37:8a:1f:90:de:f7:5c:
2c:e6:c1:5c:53:64:bd:39:96:3c:6d:d5:2f:75:16:
79:35:c9:eb:6d:69:04:fd:91:13:dc:de:fe:66:21:
f6:f7:43:cf:1a:65:0a:a5:ae:d4:45:48:73:74:5a:
29:97:ae:31:a1:2d:30:a7:ad:b5:a9:ef:63:ab:7f:
4e:57:e9:db:d9:bc:54:8a:63:2d:96:48:f5:62:e2:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:52:CF:AF:B0:F7:D5:5E:9D:3F:42:2F:3A:4C:0B:AA:C2:A2:58
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS60379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127b::/48
Signature Algorithm: sha256WithRSAEncryption
87:eb:0e:f9:15:09:76:2a:87:53:ea:d7:f6:4a:81:40:66:4a:
e3:e5:68:76:c1:69:cc:45:06:21:c6:b6:cb:d4:65:ef:66:6a:
f3:ac:ab:85:4b:c2:93:6d:b7:88:1b:ea:9e:ae:a6:0a:b9:40:
f3:f1:be:37:59:7c:2e:7d:a7:9a:8c:e7:0e:c9:35:2c:70:fb:
00:57:4a:f7:47:ce:fc:2a:6a:77:96:c7:a0:23:3a:24:a9:a3:
b7:9e:e3:a2:8f:11:f2:11:b1:f4:4b:c2:4e:f9:4d:c4:97:51:
cf:78:0b:a4:04:cd:79:ff:f6:37:1c:df:bc:0a:c1:a9:06:03:
55:6e:6c:44:fb:07:bf:19:4f:ea:37:d9:49:4c:99:a0:27:89:
41:fe:9d:0d:49:49:22:c3:04:86:95:5c:6a:21:ab:85:27:ae:
ab:3e:b4:32:eb:72:05:93:2c:5f:ea:eb:a5:87:7c:e6:1f:9f:
0c:b3:b9:e0:bc:c1:34:ab:23:a1:2b:bd:9f:cb:23:1d:0b:3e:
5b:17:d1:52:8b:76:14:cf:6e:5b:f7:23:1f:76:77:9e:76:5f:
c3:80:20:bf:80:e4:f7:40:54:fc:b9:e8:4b:0f:15:36:15:cf:
0d:a1:21:80:b5:e8:a5:7d:e7:f7:0c:1d:cb:b2:2d:d0:69:5e:
3f:80:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org